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Abstract 

We study fixpoints of operators on lattices. 
To this end we introduce the notion of an 
approximation of an operator. We order ap- 
proximations by means of a precision order- 
ing. We show that each lattice operator O 
has a unique most precise or ultimate ap- 
proximation. We demonstrate that fixpoints 
of this ultimate approximation provide useful 
insights into fixpoints of the operator O. 

We apply our theory to logic program- 
ming and introduce the ultimate Kripke- 
Kleene, well-founded and stable semantics. 
We show that the ultimate Kripke-Kleene 
and well-founded semantics are more precise 
then their standard counterparts We argue 
that ultimate semantics for logic program- 
ming have attractive epistemological proper- 
ties and that, while in general they are com- 
putationally more complex than the standard 
semantics, for many classes of theories, their 
complexity is no worse. 

1 INTRODUCTION 

Semantics of most knowledge representation languages 
are defined as collections of interpretations or possible- 
world structures. The sets of interpretations and 
possible- world structures, with some natural order- 
ings, form complete lattices. Logic programs, and de- 
fault and autoepistemic theories determine operators 
on these lattices. In many cases, semantics of pro- 
grams and theories are given as fixpoints of these oper- 
ators. Consequently, an abstract framework of lattices, 
operators on lattices and their fixpoints has emerged as 
a powerful tool in investigations of semantics of these 
logics. Studying semantics of nonmonotonic reason- 
ing systems within an algebraic framework allows us 



to eliminate inessential details specific to a particular 
logic, simplify arguments and find common principles 
underlying different nonmonotonic formalisms. 

The roots of this algebraic approach can be traced 
back to studies of semantics of logic programs [ vEK76, 
AvE82| , Fit85, Prz9C] and of applications of lattices 



and bilattices in knowledge representation [Gin 



Exploiting the concept of a bilattice and relying on 
some general properties of operators on lattices and 
bilattices, Fitting proposed an elegant algebraic treat- 
ment of all majo r 2-, 3- and 4- valued semantics of logic 
prog rams [Fit01 |, that is, the support e d-mod cl seman- 



tics 



Cla78| , stabl e-mod e l sema ntics GL88 , Kripke- 



Kleene s emantic s | Fit85 , Kun87] and well-founded se- 
mantics |VRS9l|. 



In [ DMT00a |, we extended Fitting's work to a more 
abstract setting of the study of fixpoints of lattice op- 
erators. Central to our approach is the concept of an 
approximation of a lattice operator O. An approxi- 
mation is an operator defined on a certain bilattice 
(the product of the lattice by itself, with two appro- 
priately defined lattice orderings). Using purely alge- 
braic techniques, for an approximation operator for O 
we introduced the notion of the stable operator and the 
concepts of the Kripke-Kleene, well-founded and sta- 
ble fixpoints, and showed how they provide informa- 



tion about fixpoints of the operator O. In [DMTOOa 
we noted that our approach generalizes the results de- 



scribed in FitOl . We observed that the 4- valued im- 
mediate consequence operator Tp is an approximation 
operator for the 2- valued immediate consequence oper- 
ator Tp and showed that all the semantics considered 
by Fitting can be derived from Tp by means of the 
general algebraic constructions that apply to arbitrary 
approximation operators. 



In | DMT00b |, we applied our algebraic approach to 
default and autoepistemic logics. Autoepistemic logic 
was defined by Moore [Moo84] to formalize the knowl- 



edge of a rational agent with full introspection capa- 
bilities. In Moore's approach, an autoepistemic theory 
T defines a characteristic operator Dt on the lattice of 
all possible-world structures. Fixpoints of Dt (or, to 
be precise, their theories) are known as expansions. In 
DMT00b|, we proposed for Dt an approximation op- 
erator, T>t, defined on a bilattice of belief pairs (pairs 
of possible- world structures). Complete fixpoints of 
T>t correspond to expansions of T (fixpoints of Dt), 
the least fixpoint of T>t provides a constructive ap- 
proximation to all expansions (by analogy with logic 
programming, we called it the Kripke-Kleene fixpoint) . 
Using general techniques introduced in [DMTOOaj we 
derived from T>t its stable counterpart, the operator 
T> T l . Complete fixpoints of Dp yield a new seman- 
tics of extensions for autoepistemic logic. Finally, the 
least fixpoint of the stable operator results in yet an- 
other new semantics, the well-founded semantics for 
autoepistemic logic (again, called so due to analogies 
to the well-founded semantics in logic programming), 
which approximates all extensions. 

The same picture emerged in the case of default logic 
[DMT00b|. For a default theory A we defined an op- 
erator £\ and characterized all major semantics for 
default logic in terms of fixpoints of In partic- 



ular, the standard semantics of extensions |Rei80| is 
determined by complete fixpoints of the stable opera- 
tor £ 8 £ derived from Our results on autoepistemic 
and default logics obtained in DMTOOb] allowed us to 
clarify the issue of their mutual relationship and pro- 
vided insights into fundamental constructive principles 
underlying these two modes of nonmonotonic reason- 
ing. 

These re sult prove that the algebraic framework devel- 
oped in [DMTOOaj is an effective tool in studies of se- 
mantics of knowledge representation formalisms. It al- 
lowed us to establish a comprehensive semantic treat- 
ment for nonmonotonic logics and demonstrated that 
major nonmonotonic systems are closely related. How- 
ever, the approach, as it was developed, is not entirely 
satisfactory. It provides no criteria that would allow 
us to prefer one approximation over another when at- 
tempting to define the concept of a stable fixpoint or 
when approximating fixpoints by means of the Kripke- 
Kleene or well-founded fixpoints. It does not give us 
any general indications how to obtain approximations 
and which approximation to pick. Thus, our theory 
leaves out a key link in the process of defining and 
approximating fixpoints of operators on lattices. 

In particular, when defining semantics of nonmono- 
tonic formalisms, we select an approximation opera- 
tor, rather then derive it in a principled way. The 



approximations used, the bilattice operators Tp, T>t 
and £a, are not algebraically determined by their cor- 
responding lattice operators Tp, Dt and respec- 
tively. Consequently, some programs or theories with 
the same basic operators have different Kripke-Kleene, 
well-founded or stable fixpoints associated with them. 

We address this problem here. We extend our theory 
of approximations and introduce the notion of the pre- 
cision of an approximation. We show that each lattice 
operator O has a unique most precise approximation 
which we call the ultimate approximation of O. Since 
the ultimate approximation is determined by O, it is 
well suited for investigations of fixpoints of O. As a 
result we obtain concepts of ultimate stable fixpoints, 
the ultimate Kripke-Kleene fixpoint and the ultimate 
well-founded fixpoint that depend on O only and not 
on a (possibly arbitrarily) selected approximation to 
O. 

We apply our theory to logic programming, default 
logic and autoepistemic logic (only the first system 
is discussed here, due to space limitations). We com- 
pare ultimate semantics with the corresponding "stan- 
dard" semantics of logic programs. In particular, we 
show that the ultimate Kripke-Kleene and the ultimate 
well-founded semantics are more precise then the stan- 
dard Kripke-Kleene and well-founded semantics. This 
better accuracy comes, however, at a cost. We show 
that ultimate semantics are in general computation- 
ally more complex. On the other hand, we show that 
for wide classes of theories, including theories likely to 
occur in practice, the complexity remains the same. 
Thus, our new semantics may prove useful in comput- 
ing stable models and default extensions. 

The ultimate semantics have also properties that are 
attractive from the logic perspective. In particular, 
two programs or theories determining the same basic 
2-valued operator have the same ultimate semantics. 
This property, as we noted, is not true in the standard 
case. 

In summary, our contributions are as follows. We ex- 
tend the algebraic theory of approximations by provid- 
ing a principled way of deriving an approximation to 
a lattice operator. In this way, we obtain concepts of 
Kripke-Kleene fixpoint, well-founded fixpoint and sta- 
ble fixpoints that are determined by the operator O 
and not by the choice of an approximation. In specific 
contexts of most commonly used nonmonotonic sys- 
tems we obtain new semantics with desirable logical 
properties and possible computational applications. 



2 PRELIMINARIES 

Let (L, <} be a poset and let A be an operator on L. A 
poset is chain- complete if it contains the least element 
_L and if every chain of elements of L has a least upper 
bound (lub) in L. An element x of A is a pre-fixpoint 
of A if A(x) < fixpoint of A if A(x) = x. 

Let A be a monotone operator on a chain-complete 
poset (L,<). Let us define a sequence of elements 
of L by transfinite induction as follows: (1) c° = _L; 
(2) c a+1 = A(c a ); (3) c a = lub{{c p : (3 < a}), for a 
limit ordinal a. One can show that this sequence is 
well defined, that is has in L its least upper bound 
and that this least upper bound is the least fixpoint 
of A (lfp(A), in symbols). One can also show that 
the least fixpoint of a monotone operator on a chain- 
complete poset is the least pre-fixpoint of A. That is, 
we have lfp(A) = glb({x G L: A(x) < x}). Monotone 
operators on chain-complete posets and th eir fixpoints 
and pre- fixpoints are discussed in [ Mar7(| . 

A lattice is a poset (L, <} such that L ^ and every 
pair of elements x,y G L has a unique greatest lower 
bound and least upper bound. A lattice is complete 
if its every subset has a greatest lower bound and a 
least upper bound. In particular, a complete lattice 
has a least and a greatest element denoted by _L and 
T, respectively. 

For any two elements x, y G L, we define [x,y] — {z G 
L: x < z < y}. If (L,<) is a complete lattice and 
x < y, then ([a;, y], <) is a complete lattice, too. 

Let (L, <) be a complete lattice. By the product bi- 
lattice [Gin88] of (L, <} we mean the set L 2 — L x L 
with the following two orderings < p and <: 



L (x,y) < P (x',y', 

2- (x, y) < (x', y') if x < x' and y < y 



if x < x' and y' < y 
') if x< ' ' 



Both orderings are complete lattice orderings for L 2 . 
However, in this paper we are mostly concerned with 
the ordering < p . 

An element (x, y) G L 2 is consistent if x < y. We can 
think of a consistent element (x,y) G L 2 as an approx- 
imation to every z G L such that x < z < y. With 
this interpretation in mind, the ordering < p , when re- 
stricted to consistent elements, can be viewed as a pre- 
cision ordering. Consistent pairs that are "higher" in 
the ordering < p provide tighter approximations. Max- 
imal consistent elements with respect to < p are pairs 
of the form (x, x). We call approximations of the form 
(x, x) — exact. 

We denote the set of all consistent pairs in L 2 by L c . 
The set (L c , < p ) is not a lattice. It is, however, chain- 



complete. Indeed, the element (_L, T) is the least ele- 
ment in L c and the following result shows that every 
chain in L c has (in L c ) the least upper bound. 

Proposition 2.1 Let L be a complete lat- 
tice. If {(a a ,b a )} a is a chain of elements 
in (L c , < p ) then lub({a a } a ) < glb({a a } a ) and 
(lub{{a a } a ),glb({a a } a )) = lub< p {{(a a ,b a )} a ). 

It follows that every < p -monotone operator on L c has 
a least fixpoint. 

3 PARTIAL APPROXIMATIONS 

For an operator A : L c — > L c , we denote by A 1 
and A 2 its projections to the first and second coor- 
dinates, respectively. Thus, for every (x, y) G L c , we 
have A{x,y) — (A 1 (x,y), A 2 (x,yj). An operator A : 
L c —> L c is a partial approximation operator if it is < p - 
monotone and if for every x G L, A l {x, x) = A 2 (x, x). 
We denote the set of all partial approximation oper- 
ators on L c by Appx(L c ). Let A G Appx(L c ). Since 
A is < p -monotone and L c is chain-complete, A has a 
least fixpoint, called the Kripke-Kleene fixpoint of A 
(KK(A), in symbols). Directly from the definition, it 
follows that KK(A) approximates all fixpoints of A. 

If A G Appx(L c ) and O : L — > L is an operator on L 
such that A(x,x) — (0(x),0(x)) then we say that A 
is a partial approximation of O. We denote the set of 
all partial approximations of O by Appx{0). If A is a 
partial approximation of O then x G L is a fixpoint of 
O if and only if {x, x) is a fixpoint of A. Thus, for every 
fixpoint x of O, we have KK(A) < p (x, x) or, equiv- 
alently, KK 1 ^) < x < KK 2 (A), where KK 1 (A) and 
KK 2 (A) are the two components of the pair KK(A). 

Operators from Appx(L c ) describe ways to revise con- 
sistent approximations. Of particular interest are 
those situations when the revision of an approxima- 
tion leads to another one that is at least as accurate. 
Let A be an operator on L c . We call an approximation 
(a, b) A-reliable if (a, b) < p A{a, b). 

Proposition 3.1 Let L be a complete lattice and A G 
Appx(L c ). If (a,b) G L c is A-reliable then, for every 
x G [J-,6], A 1 (x,b) G [J-,6] and, for every x G [a, T], 
A 2 (a,x) G [o,T]. 

Proof: Let x G [±,b]. Then (x,b) < p (6,6). By the 
< p -monotonicity of A, 

A 1 (x,b)< A 1 (6, 6) = A 2 (6, 6) < A 2 (a, 6) < 6. 

The last inequality follows from the fact that (a, 6) is 
A-reliable. The second part of the assertion can be 
proved in a similar manner. □ 



This proposition implies that for every A-reliable pair 
(a, b), the restrictions of to [_L,6] and A 2 (a, •) 

to [a, T] are in fact operators on [_L, b] and [a, T], 
respectively. Moreover, they are <-monotone oper- 
ators on the posets ([_!_,&],<} and ([a, T],<). Since 
([-L, b], <) and ([a, T], <} are complete lattices, the op- 
erators A 1 ^, b) and A 2 (a, •) have least fixpoints in the 
lattices {[_L, 6], <) and ([a, T], <), respectively. We de- 
fine: 

b A ^ = lfp(A 1 (;b)) and a A ^lfp(A 2 (a,-)). 

We call the mapping (a, b) i— > (b" 4 -!-, a A f ), defined on 
the set of A-reliable elements of L c , the stable revision 
operator for A. When A is clear from the context, we 
will drop the reference to A from the notation. 

Directly from the definition of the stable revision op- 
erator it follows that for every A-reliable pair, b^ < b 
and a < a 1 ' . 

The stable revision operator for A G Appx(L c ) is cru- 
cial. It allows us to distinguish an important subclass 
of the class of all fixpoints of A. Let L be a complete 
lattice and let A G Appx(L c ). We say that (x,y) £ L c 
is a stable fixpoint of A if (x, y) is A-reliable and is a 
fixpoint of the stable revision operator (that is, x = y- 1 



and y 



By the A-reliability of (x,y), the second 



requirement is well defined. 

Stable fixpoints of an operator are, in particular, its 
fixpoints. 

Proposition 3.2 Let L be a complete lattice and let 
A G Appx(L c ). If (x,y) is a stable fixpoint of A then 
(x, y) is a fixpoint of A. 

Proof: Since (x,y) is stable, x = lfp(A x (■, y)). In par- 
ticular, x = A 1 (x,y). Similarly, y — A 2 {x,y). □ 

Let O be an operator on a complete lattice L and let 
A G Appx(0). We say that x is an A-stable fixpoint 
of O if (x, x) is a stable fixpoint of A. The notation is 
justified. Indeed, it follows from Proposition 3.2 and 



our earlier remarks that every stable fixpoint of O is, 
in particular, a fixpoint of O. 

The notion of A-reliability is not strong enough to 
guarantee desirable properties of the stable revision 
operator. In particular, if (a, b) G L c is A-reliable, it 
is not true in general that (b^,a^) is consistent nor 
that (a, b) < p (b^a^). There is, however, a class of 
A-reliable pairs for which both properties hold. An 
A-reliable approximation (a, b) is A-prudent if a < 
bK We note that every stable fixpoint of A is A- 
prudent. We will now prove several basic properties 
of A-prudent approximations. 



Proposition 3.3 Let L be a complete lattice, A G 
Appx(L c ) and (a,b) G L c be A-prudent. Then, (b^,a^) 
is consistent, A-reliable and A-prudent and (a, b) < p 
(&W). 

Proof: By the definition of b^ and a} we have that 
b^ < b and a < . Moreover, since (a, b) is A-prudent, 
it follows that a < bK 

Next, since (a, b) is A-reliable, it follows that a < b 
and A 2 (a,b) < b. Thus, b is a pre-fixpoint of A 2 (a, ■). 
Consequently, < b (as is the least fixpoint of 
A 2 (a, •)). Hence, (a, b) < p (^,a T ). 

By the < p -monotonicity of A we obtain: 

A 1 {a\b) < A 1 {a\a v )=A 2 {a\a v ) < A 2 (a,a T ) = a T . 

It follows that a) is a pre-fixpoint of the operator 
A 1 (•, b). Thus, b l = lfp{A l {-,b)) < cJ and so, (6 x ,a T ) 
is consistent. 

Let us now observe that = A 1 (b^,6) < A 1 (6^,a^). 
Similarly, a T = A 2 (a, a T ) > A 2 (6 i ,a T ). Thus, the pair 
(6^, a^) is reliable. 

Lastly, we note that for every x G [J-,a T ], A 1 (x,b) < 
A 1 (x,a^) < (the last inequality follows by the A- 
reliability of (b l ,a^)). Hence, 6 X = Zjp^O, &)) < 
//p(A 1 (-, oJ)) and, consequently, (b^,a^) is A-prudent. 

□ 

Let us observe that an A-reliable pair (a, b) is revised 
by an operator A into a more accurate approxima- 
tion A(a,b). An A-prudent pair (a, b) can be revised 
"even more". Namely, it is easy to see that A 1 (a, b) < 
A^b Kb) = b l and a T = A 2 (a,a T ) < A 2 (a, 6). Thus, 
A(a,b) < p (b*,a'). In other words, (6^,oJ) is indeed 
at least as precise revision of (a, b) as A(a, b) is. 

The stable revision operator satisfies a certain mono- 
tonicity property. 

Proposition 3.4 Let L be a complete lattice and let 
A G Appx(L c ). If (a,b) G L c is A-reliable, (c,d) G L c 
is A-prudent and if (a,b) < p (c,d), then (b^,a^) < p 
(^,c T ). 

Proof: Clearly, we have d^ < c^ < d < b. By 
the < p -monotonicity of A, it follows that A 1 (d*,b) < 
A 1 {d l ,d) = d l . Thus, d l is a pre-fixpoint of A 1 (-,6). 
Since b^ is the least fixpoint of Z/p(A 1 (-, b)), it follows 
that b l <d L . 

It remains to prove that < . Let u — glb(a^ ,d^). 
By Proposition 3^3, (c,d) < p (d^,c'). Since (a, b) < p 
(c, d), it follows that a < dK Further, by the A- 
reliability of (a, b) and (c, d), we have a < and 



d)- < d. Thus, a < u < and u < dr < d. Con- 
sequently, 



A x (u, tf) < = A 2 (w,u) < A 2 (a,a T ) = a 1 ' 



and 



A x (u,d) < A^d^d) = d l . 



It follows that yl 1 (u, d) < glb(a\d^) = u. In particu- 
lar, u is a pre-fixpoint of A 1 ^, d). Since is the least 
fixpoint of yl 1 (-,o?), d^ < u. Hence, d^ < . 

We now have a < c < d^ < (the first inequality 
follows from the assumption (a, b) < (c, d), the second 
one follows by Proposition |3.3| from the assumption 
that (c,d) is A-prudent). Thus, a < c < a) and the 
< p -monotonicity of A implies 

A 2 (c,a T ) < A 2 (a,a T ) = a T . 

Hence, a* is a pre-fixpoint of A 2 (c, •). Since is the 
least fixpoint of A 2 (c, ■), it follows that < . □ 

Since stable fixpoints are prudent, we obtain the fol- 
lowing corollary. 

Corollary 3.5 Let L be a complete lattice, A £ 
Appx(L c ) and let (c, d) £ L c be a stable fixpoint of 
A. If (a, 6) E L € is A-reliable and (a, b) < p (c, d) then 
(&W) < p (c,d). D 

The next result states that the limit of a chain of A- 
prudent pairs is A-prudent. 

Proposition 3.6 Let L be a complete lattice, A £ 
Appx(L c ) and let {(a a ,b a )} a be a chain of A-prudent 
pairs from L c . Then, lub({(a a ,b a )} a ) is A-prudent. 



lub{{a a } a ) and 6° 



Proof: Let us set a°° 
glb({b a } a ). By Proposition O, (a 00 ,^ 00 ) is consistent 



and {a°° ,b°°) = lub({(a a ,6")} a ). Let us now observe 
that, by ^-reliability of (a a ,b a ) and < p -monotonicity 
of A, we have (a a ,b a ) < p A{a a ,b a ) < p ^(a 00 ,^ 00 ). 
Thus, (a 00 ,^ 00 ) = lub({(a a ,b a )} a ) < A{a°°,b ca ). It 
follows that (a°° ,6°°) is A-reliable. 

The A-reliability of (a 00 ,^ 00 ) implies, in particular, 
that for every x E [±,b°°], A 1 ^, 6°°) < 6°°. Thus, 
by < p -monotonicity of A, for every x E [_L, 6°°] 

A x (a;,6 a ) < A l {x,b°°) < b°° . 

Hence, pre-fixpoints of are prefixpoints of 

and, consequently, 



Since (a Q ,6 Q ) is A-prudent, we have that a a < 
ljp(A 1 (-,b a )). Thus, for arbitrary a, a a < 
IfipiA 1 ^^ 00 )) and, consequently, a°° < //p(A 1 (-, 6°°)). 
It follows that (a°°, b°°) is A-prudent. □ 

We will now prove that the set of all stable fixpoints of 
an operator has a least element (in particular, it is not 
empty). To this end, we define a sequence {(a a ,b a )} a 
of elements of L c by transfinitc induction: 

1. (a°,b°) = (± ) T) 

2. If a = (3 + 1, we define a a = fr^ 1 and 6 Q = 

3. If a is a limit ordinal, we define (a a ,b a ) = 
lub({{a l3 ,b' 3 ): (3 < a}). 

Theorem 3.7 The sequence {(a a ,b a )} a is well de- 
fined, < p -monotone and its limit is the least stable fix- 
point of a partial approximation operator A. 

Proof: It is obvious that (_L, T) is A-prudent. Thus, by 
the transfinitc induction it follows that each element 
in the sequ enc e is well defined and A-prudent (Propo- 
sitions 3.3 and |3.6| settle the cases of successor ordinals 



and limit ordinals, respectively). In the same way, one 
can establish the <„-monotonicity of the sequence. 



Let (a 00 ,^ 00 ) = lub({(a^,b^)} a ). By Proposition |J, 
(a 00 ^ 00 ) is A-prudent. Thus, (a°° ,6°°) is A-reliable. 
Moreover, we have a°° = (b°°y and 6°° = (a°°)L 
Thus, (a°°, 6°°) is a stable fixpoint of A. Further, i t is 
easy to see by transfinite induction and Corollary |3.5| 
that (a 00 ,?) 00 ) approximates all stable fixpoints of A. 
Thus, it is the least stable fixpoint of A. □ 

We call this least stable fixpoint the well-founded fix- 
point of A and denote it by WF(A). The well-founded 
fixpoint approximates all stable fixpoints of A. In par- 
ticular, it approximates all A-stable fixpoints of the 
operator O. That is, for every A-stable fixpoint x 
of O, WF(A) < p (x,x) or, equivalently, WF*(A) < 
x < WF 2 (A), where WF X (A) and WF 2 (A) are the 
two components of the pair WF(A). Moreover, the 
well-founded fixpoint is more precise than the Kripke- 
Kleene fixpoint: for A £ Appx(0), KK(A) < p WF(A). 

In UDMTOObj , |DMT00a| , we showed that when ap- 
plied to appropriately chosen approximation opera- 
tors in logic programming, default logic and autoepis- 
temic logic, these algebraic concepts of fixpoints, sta- 
ble fixpoints, the Kripke-Kleene fixpoint and the well- 
founded fixpoint provide all major semantics for these 
nonmonotonic systems and allow us to understand 
their interrelations. 

We need to emphasize that the concept of a partial ap- 
proximation introduced here is different from the con- 



cept of approximation introduced in [DMTOOa . The 



latter notion is defined as an operator of the whole bi- 
lattice L 2 . That choice was motivated by our search 
for generality and potential applications of inconsis- 
tent fixpoints in situations when we admit a possibility 
of some statements being ovcrdcfmed. While different, 
both approaches are very closely related^. 

4 ULTIMATE APPROXIMATIONS 

Partial approximations in Appx(L c ) can be ordered. 
Let A,B G Appx(L c ). We say that A is less precise 
than B (A < p B, in symbols) if for each pair (x,y) £ 
L c , A{x, y) < p B(x, y). It is easy to see that if A < p B 
then there is an operator O on the lattice L such that 
A,B e Appx(0). 

Lemma 4.1 Let L be a complete lattice and A, B G 
Appx(L c ) . If A < p B and (a,b) G L c is A-prudent 
then (a, b) is B -prudent and (b Al ,a A ^) < p (6 Bi ,a BT ). 

Proof: Clearly, (a, b) < p A(a,b) < B(a,b). Thus, (a, 6) 
is B-reliable. 

For each pre-fixpoint x < b of A 1 (x,b) < 

B 1 {x,b) < x. Consequently, i is a prefixpoint of 
A x (-, b). It follows that b Al < b B K Since a < b A ^ 
a<b Bl . Thus (a,b) is B-prudent. 

Likewise, we can prove that any pre-fixpoint of A 2 (a, •) 
is a prefixpoint of B 2 (a,-), and consequently, a B ^ < 
a A L Since also b Al < b BL , it follows that (b Ai , a AT ) < p 
(b B ^a B ^). □ 

More precise approximation have more precise Kripke- 
Kleene and well-founded fixpoints. 

Theorem 4.2 Let O be an operator on a complete 
lattice L. Let A, B G Appx(0). If A < p B then 
KK(A) < p KK(B) and WF(A) < p WF(B). 

Proof: Let us denote by {(a% b A )} a the sequence of el- 
ements of (L c . < p ) obtained by iterating the operator 
A over (_L, T). The sequence {(a B , b%)} a is defined in 
the same way. Since A < p B, it follows by an easy in- 
duction that for every ordinal a, (a% b A ) < P (a%, b B ). 
Since KK(A) is the limit of the sequence {(a%b c i)}a 
and KK(B) is the limit of the sequence {(a^,6^)} Q , 
it follows that KK(A) < p KK(B). 

To prove the second part of the assertion, we will 
now assume that the sequences {(o>%b'^)} a and 
{{a%,bg)} a denote the sequences used in the defini- 
tion of the well-founded fixpoints of A and B, respec- 



tively. To prove the assertion we will now show that 
for every ordinal a, {a% &2) — p Ki &b)- 

Clearly, [a\, b° A ) < p (a° B ,b° B ). Let us assume that a — 
(3 + 1 and that (a^ Al b l l) < v (a B ,b B ). Since (a^,b^) 



is ^4-prudent, Lemma 
and 



4.1 



entails that it is _B-prudent 



By Proposition 3.4, 

(Kf 1 ,^) <p ((4) Bi ,(4) BT ) = (aS,6S). 

The case of the limit ordinal a is straightforward. 

Since WF(^4) and WF(B) are the limits of the se- 
quences {{a% b A )} a and {(a B , b B )} a , respectively, the 
second part of the assertion follows. □ 

The next result shows that as the precision of an ap- 
proximation grows, all exact fixpoints and exact stable 
fixpoints are preserved. 

Theorem 4.3 Let O be an operator on a complete lat- 
tice L. Let A, B G Appx(0). If A < p B then every 
exact fixpoint of A is an exact fvxpoint of B, and every 
exact stable fixpoint of A (that is, an A-stable fixpoint 
of O) is also an exact stable fixpoint of B ( that is, a 
B-stable fixpoint of O ). 

Proof: Since for every x G L, A(x, x) = B(x,x) = 
(0(x),0(x)), the first part of the assertion follows. Let 
us now assume that (x, x) is an exact stable fixpoint of 
A. In particular, it follows that (x, x) is a fixpoint of A 
and is A-prudent. By Lemma 4.1, (x.x) is _B-prudent 
and (x,x) < p (x B ^ ,x B ^). The latter pair is consistent 



and hence x is an exact stable fixpoint of B. 



(Proposition 3.3). Consequently, (x,x) is (x B ^,x B ^) 

□ 



1 We will include a detailed discussion of the relationship 
between the two approaches in the full version of the paper. 



Non-exact fixpoints are not preserved, in general. Let 
us consider two partial approximations A and B such 
that A < p B. Let us also assume that WF(A) < p 
WF(B) (that is, A has a strictly less precise well- 
founded fixpoint than B). Then, clearly, WF(A) is 
no longer a stable fixpoint of B. Thus, fixpoints of 
A may disappear when we move on to a more precise 
approximation B. 

More precise approximations of a non-monotone oper- 
ator O yield more precise well-founded fixpoints and 
additional exact stable fixpoints. The natural question 
is whether there exists an ultimate approximation of O, 
that is, a partial approximation most precise with re- 
spect to the ordering < p . Such approximation would 
have a most precise Kripke-Kleene and well-founded 



fixpoint and a largest set of exact stable fixpoints. We 
will show that the answer to this key question is pos- 
itive. Such ultimate approximation, being a distin- 
guished object in the collection of all approximations 
can be viewed as determined by O. Consequently, fix- 
points of the ultimate approximation of O (including 
stable, Kripke-Kleene and well-founded fixpoints) can 
be regarded as determined by O and can be associated 
with it. 

We start by providing a non-constructive argument 
for the existence of ultimate approximations. Let us 
note that the set Appx(O) is not empty. Indeed, let 
us define Ao{x, y) = (0(x),0(x)), if x = y, and 
Ao(x,y) = (_L,T), otherwise. It is easy to see that 
Ao G Appx(0) and that it is the least precise ele- 
ment in Appx(0). Next, we observe that Appx(0) 
with the ordering < p is a complete lattice, as the 
set Appx(0) is closed under the operations of taking 
greatest lower bounds and least upper bounds. It fol- 
lows that Appx{0) has a greatest element (most pre- 
cise approximation). We call this partial approxima- 
tion the ultimate approximation of O and denote it by 
U . 

We call the Kripke-Kleene and the well-founded fix- 
points of Uo, the ultimate Kripke-Kleene and the ul- 
timate well-founded fixpoint of O. We denote them by 
KK(O) and WF(O), respectively We call a stable fix- 
point of Uo an ultimate partial stable fixpoint of O. 
We refer to an exact stable fixpoint of Uo as an ulti- 
mate stable fixpoint of O. Exact fixpoints of all partial 
approximations are the same and correspond to fix- 
points of O. Thus, there is no need to introduce the 
concept of an ultimate exact fixpoi nt o f O. We have 
the following corollary to Theorems 4.2 and 4.3. 



Corollary 4.4 Let O be an operator on a complete 
lattice L. For every A G Appx(0), KK(A) < p 
KK(Uo)> WF(A) < p WF(U ) and every A-stable fix- 
point of O is an ultimate stable fixpoint of O. 

We will now provide a constructive characterization of 
the notion. To state the result, for every x,y G L such 
that x <y,we define 0([x,y]) = {0{z) \ z G 

Theorem 4.5 Let O be an operator on a complete 
lattice L. Then, for every (x,y) G L c , Uo(x,y) = 
(glb(0([x,y})),lub(0([x,y]))). 

Proof: We define an operator C : L c — > L 2 by setting 

C(x,y) = (glb(0([x,y])),lub(0([x,y}))). 

First, let us notice that since glb(0([x, y})) < 
lub(0([x, y])), the operator C maps L c into L c . More- 
over, it is easy to see that C is <p-monotone. Lastly, 



since 0([x,x}) — {0{x)}, 

glb(0{[x,x})) = lub(0([x,x})) = 0(x). 

and, consequently, C(x,x) — (0(x),0(x)). Thus, it 
follows that C is a partial approximation of O. Since 
Uo is the most precise approximation, we have C < p 
Uo- 

On the other hand, Uo(x,y) < (0(z),0(z)) for every 
z G [x,y]- Therefore U (x,y) < p O(z) for all z G 
[x,y] and thus U (x,y) < glb(0([x, y])). Similarly, 
lub(0([x, y])) < U {x,y). Since x < y are arbitrary, 
Uo <p C, as desired. □ 

With this result we obtain an explicit characterization 
of ultimate stable fixpoints of an operator O. 

Corollary 4.6 Let L be a complete lattice. An ele- 
ment x G L is an ultimate stable fixpoint of an opera- 
tor O : L — > L if and only if x is the least fixpoint of 
the operator glb(0([-, x])) regarded as an operator on 
[±,x]. 

We conclude this section by describing ultimate ap- 
proximations for monotone and antimonotone opera- 
tors on L. 

Proposition 4.7 If O is a monotone operator on 
a complete lattice L then for every (x,y) G L c , 
Uo(x,y) = (0(x),0(y)). If O is antimonotone then 
for every (x,y) G L c , U (x,y) = (0{y),0(x)). 

Proof: By Theorem [0| , 

U (x, y) = (glb(0([x, y})), lub(0([x, y]))). 

Now, it is easy to see that if O is monotone, then 
glb(0([x,y})) = 0(x) and lub(0([x,y})) = 0(y). If 
O is antimonotone, then glb(0([x, y])) = 0(y) and 
lub(0([x, y))) = 0(x). The proposition follows. □ 



Using the results from [DMT00a| and Proposition 4.7 
we now obtain the following corollary. 

Corollary 4.8 Let O be an operator on a complete 
lattice L. If O is monotone, then the least fixpoint 
of O is the ultimate well-founded fixpoint of O and the 
unique ultimate stable fixpoint of O . If O is antimono- 
tone, then KK(O) = WF(O) and every fixpoint of O 
is an ultimate stable fixpoint of O. 

5 ULTIMATE SEMANTICS FOR 
LOGIC PROGRAMMING 

The basic operator in logic programming is the one- 
step provability operator Tp introduced in [ yEK76 . It 



is defined on the lattice of all interpretations. This lat- 
tice consists of subsets of the set of all atoms appearing 
in P and is ordered by inclusion (we identify truth as- 
signments with subsets of atoms that are assigned the 
value t). 

Let P be a logic program. We denote by Up the ulti- 
mate approximation operator for the operator Tp. By 



specializing Theorem 4.5 to the operator Tp we obtain 



that for every two interpretations I C J, 

U P (I, J) = (glb(T P ([I, J])), lub(T P ([I, J]))). 

Replacing the ultimate approximation operator Uo 
in the definitions of ultimate Kripke-Klecne, well- 
founded and stable fixpoints with Up results in the 
corresponding notions of ultimate Kripke-Kleene, well- 
founded and stable models (semantics) of a program 
P. 

We are now in a position to discuss commonsense rea- 
soning intuitions underlying abstract algebraic con- 
cepts of ultimate approximation and its fixpoints. Let 
us consider two interpretations I and J such that 
I C J. We interpret I as a current lower bound and J 
as a current upper bound on the set of atoms that are 
true (under P). Thus, I specifies atoms that are def- 
initely true, while J specifies atoms that are possibly 
true. Arguably, if an atom p is derived by applying 
the operator Tp to every interpretation K G [I, J], it 
can safely be assumed to be true (in the context of 
the knowledge represented by / and J). Thus, the set 
I' = glb(Tp([I, J])) can be viewed as a revision of /. 

Similarly, since every interpretation K G [/, J] must 
be regarded as possible according to the pair (I, J) 
of conservative and liberal estimates, an atom might 
possibly be true if it can be derived by the operator 
Tp from at least one interpretation in [I, J]. Thus, the 
set J' — lub(Tp([I, J])), consisting of all such atoms, 
can be regarded as a revision of J. Clearly, (/', J') = 
Up(I,J) and, consequently, Up can be viewed as a 
way to revise our knowledge about the logical values 
of atoms as determined by a program P from (/, J) to 
(I', J'). 

By iterating Up starting at (_L, T), we obtain the ulti- 
mate Kripke-Kleene model of P as an approximation 
that cannot be further improved by applying Up. The 
ultimate Kripke Kleene model of P approximates all 
fixpoints of Up and, in particular, all supported mod- 
els of P. Often, however, the Kripke-Kleene model 
is too weak as we are commonly interested in those 
(partial) models of P that satisfy some minimality or 
groundedness conditions. These requirements are sat- 
isfied by ultimate stable models and, in particular, by 
the ultimate well-founded model of P. 



When constructing the ultimate well-founded model, 
we start by assuming no knowledge about the status 
of atoms: no atom is known true and all atoms are 
assumed possible. Our goal is to improve on these 
bounds. 

To improve on the lower bound, we proceed as follows. 
Our current knowledge does not preclude any inter- 
pretation and all of them (the whole segment [_!_, T]) 
need to be taken into account. If some atom p can 
be derived by applying the operator Tp to each el- 
ement of [J-,T] then, arguably, p could be accepted 
as definitely true. The set of all these atoms is ex- 
actly glb(Tp([±,T])). So, this set, say I\, can be 
taken as a safe new lower bound, giving a smaller in- 
terval [ii,T] of possible interpretations. We now re- 
peat the same process and obtain a new lower bound, 
say I2, consisting of those atoms that can be derived 
from every interpretation in [I± , T] . It is given by 
h = glb(T P ([Ii,T])). Clearly, I 2 improves on h. We 
iterate this process until a fixpoint is reached. This 
fixpoint, say I , consists of all these atoms for which 
there is a constructive argument that they are true, 
given that no atoms are known to be false (all atoms 
are possible). Thus, it provides a safe lower bound for 
the set of atoms the program should specify as true. 

The reasoning for revising the upper bound is differ- 
ent. The goal is to make false all atoms for which 
there cannot be a constructive argument that they are 
true. Let us consider an interpretation J such that 
for every K G [_L, J], Tp(K) G [_L, J], or equivalently, 
lub(Tp([.L, J])) C J. An atom p £ J (false in J) can- 
not be made true by applying Tp to any element in 
the segment [_L, J]. In order to derive p by means of 
Tp, some atoms that are false in J would have to be 
made true. That, however, would mean that p is not 
grounded and could be assumed to be false. Thus, each 
such interpretation J represents an upper estimate on 
what is possible (its complement gives a lower estimate 
on what is false) under the assumption that no atom is 
known to be true yet. It turns out that there is a least 
interpretation, say J 1 such that lub(Tp([±, J 1 ])) C J 1 
and it can be constructed in a bottom up way by iter- 
ating the operator lub(Tp([A-, •]). This interpretation 
can be taken as a safe lower bound on what is false 
(given that no atom is known to be true). 

The pair (J 1 , J 1 ) is the first improvement on (_L,T). 
It is precisely the pair produced by the first iteration 
of the general well-founded fixpoint definition given 
earlier. It can now be used, in place of (_L,T), to 
obtain an even more refined estimate, (I 2 , J 2 ) and the 
process continues until the fixpoint is reached. The 
resulting pair is the ultimate well-founded model of P. 



This discussion demonstrates that abstract algebraic 
concepts of ultimate approximations can be given a 
sound intuitive account. 

We will now discuss the properties of the ultimate se- 
mantics for logic programs. 

Theorem 5.1 Let P, P' be two programs such that 
Tp = Tpi . Then, the ultimate well-founded models 
and ultimate stable models of P and P' coincide. 



Proof: Theorem 4.5 implies that Up = Up/. But then 
all fixpoints of Up and Up> coincide. Thus, the result 
follows. □ 

This assertion does not hold for the (standard) well- 
founded and stable models. For instance, let Pi = 
{p <— p, p <— -<p} and P 2 = {p <— }. Clearly, T Pl = 
Tp 2 . However, P2 has a stable model, {p}, while Pi has 
no stable models. Furthermore, p is true in the well- 
founded model of P2 and unknown in the well-founded 
model of P\. 

Another appealing property is that the ultimate well- 
founded model of a program P with monotone opera- 
tor Tp is the least ffxpoint of this operator (the least 
model of P). This is a corollary of Proposition 4.8. It 
is not satisfied by the standard well-founded seman- 
tics, as shown by the program P\. 

In many cases, the ultimate well-founded semantics 
coincides with the standard well-founded semantics. A 



consequence of Corollary [4.4| is that if the well-founded 
model of a program is two-valued, then it coincides 
with the ultimate well-founded model. Thus, we have 
the following result dealing wit h the classes of Horn 
and weakly stratified programs [Prz90|: 



Proposition 5.2 If a logic program P is a Horn pro- 
gram or a (weakly) stratified program, then its ulti- 
mate well-founded semantics coincides with the stan- 
dard well-founded semantics. 

Proof: Let P be a Horn program or a weakly stratified 
program (the argument is the same) . Let WFp be the 
well-founded model of P. Let Tp be the van Emden- 
Kowalski operator for P, and let Tp be the correspond- 
ing 3- valued operator [Fit85|. Then, Tp is an approx- 
imation of Tp and th e well-fou nded model of P satis- 
fies WF P = WF(Tp) [jDMTOOal . Moreov er, for w eakly 
stratified programs, WFp is two- valued [ VRS91 ]. By 
Corollary [P 



WFp = WF(Tp) < p WF(U P ). 

Since WF (Up) is consistent, and WFp is complete, it 
follows that WFp = WF(U P ), as required. □ 



We now show that in general, attractive properties of 
ultimate semantics come at a price. Namely, we have 
the following two theorems. 

Theorem 5.3 The problem "given a finite proposi- 
tional logic program P, decide whether P has a com- 
plete ultimate stable model" is Ef -complete. 

Theorem 5.4 The problems "given a finite propo- 
sitional logic program, compute the ultimate well- 
founded fixpoint of P" and "given a finite propositional 
logic program, compute the ultimate Kripke-Kleene fix- 
point of P " are in the class . 

These results might put in doubt the usefulness of ulti- 
mate semantics. However, for wide classes of programs 
the complexity does not grow. Let k be a fixed integer. 
We define the class £k to consist of all logic programs 
P such that for every atom p 6 At(P) at least one of 
the following conditions holds: 

1. P contains at most k clauses with p as the head; 

2. the body of each clause with the head p consists 
of at most two elements; 

3. the body of each clause with the head p contains 
at most one positive literal; 

4. the body of each clause with the head p contains 
at most one negative literal. 

Theorem 5.5 The problem "given a finite proposi- 
tional logic program from class Ek, decide whether P 
has a complete ultimate stable model" is NF-complete. 

Theorem 5.6 The problem "given a finite proposi- 
tional logic program from class compute the ulti- 
mate well-founded fixpoint of P" is in P. 

We will now prove these results. If P is a finite propo- 
sitional program, then it follows directly from the def- 
inition of the ultimate Kripke-Kleene fixpoint of Tp 
(that is, the ultimate Kripke-Kleene model of P) that 
it can be computed by means of polynomially many 
(in the size of P) evaluations of the operator Up(I, J), 
where I Q J are interpretations, with all other compu- 
tational tasks taking only polynomial amount of time. 

Let us also note that 7 is a complete ultimate stable 
model of P if and only if I = lfp(U P (; I)). Thus, to 
verify whether / is a complete ultimate stable model, it 
is enough to iterate the operator lfp(Up(-,I)) starting 
with the empty interpretation. The number of itera- 
tions needed to reach the least fixpoint is again poly- 
nomial in the size of P with all other needed tasks tak- 
ing polynomial time only. A similar discussion shows 



that the ultimate well-founded model of P can be com- 
puted by means of polynomially many evaluations of 
the form U P {I,J). 

It follows that evaluating Up(I,J), where I C. J, is 
at the heart of computing the ultimate Kripke-Kleene, 
well-founded and complete stable models of a program 
P. Hence, we will now focus on this task. 

Let P be a logic program and let p be an atom in P. 
For every rule r € P such that p is the head of r, we 
define B r to be the conjunction of all literals in the 
body of r. For every atom p, we denote by Bp{p) the 
disjunction of all formulas B r , where r ranges over all 
rules in P with the head p. When p is the head of no 
rule in P then we set Bp(r) = _L (empty disjunction). 

Every logic program P has a normal representation. 
It is the collection of rules p <— Bp(p), where p ranges 
over all atoms of P. The definition of the operator Tp 
extends, in a straightforward way, to the case when 
P is given in its normal form defined above. More- 
over, if P is a logic program and Q is its normal rep- 
resentation, Tp = Tq. Thus, in the remainder of this 
section, without loss of generality we will assume that 
programs are given by means of their normal represen- 
tations. 

Let us recall that 

U P (I,J) = glb(T P ([I,J}))= p| T P (K) 



The problem to decide whether a DNF formula is a 
tautology is co-NP-complete. Thus, the problem to 
compute the ultimate Kripke-Kleene and well-founded 
models of a program P is in the class Conse- 
quently, Theorem 5.4 follows. 



ICKCJ 



and 



U 2 p{I,J) = lub(T P ([I,J]))= |J T P {K). 

ICKCJ 

Let I and J be two interpretations such that I C J. 
We define the reduct Pj j of P to be the program ob- 
tained from P by substituting in each body formula 
Bp(p), any atom r by f if r ^ J and any atom r by 
t if r € I. Note that all body atoms of Ppj is an 
element of J \ I. 

We have the following simple properties. An atom p 
of P belongs to Up(I, J) if and only if for every inter- 
pretation K G [0, J\I], the formula Bp s j(p) is true in 
K (or, equivalently, if and only if the formula Bp t j(p) 
is a tautology). An atom p of P belongs to Up(I, J) if 
and only if for some interpretation K 6 [0, J \ I], the 
formula Bp t 3 (p) is true in K (or, equivalently, if and 
only if the formula Bp T j(p) is satisfiable). 

From the second property it follows that computing 
U P (I, J) is easy — it can be accomplished in polyno- 
mial time (in the size of P). Indeed, since Bp : 3 (p) is a 
DNF formula, its satisfiability can be decided in poly- 
nomial time and the claim follows. Thus, from now on 
we will focus on the task of computing Up (I, J). 



It also follows that checking whether for an interpreta- 
tion J, J = lfp(Up(-, J)) is in A|\ Hence, the problem 
to decide whether a program has a complete ultimate 
stable fixpoint is in the class . 

We will now show the £f -hardness of the problem of 
existence of a complete ultimate stable model of a pro- 
gram P. Let tp be a prepositional formula and let I be 
an interpretation (a set of atoms). We recall that the 
following problem is S^-complete: Given a DNF for- 
mula tp over variables X\, . . . , x m , yi, . . . ,y n , decide 
whether there is a truth assignment I C {x%, . . . , x m } 
such that ipi is a tautology, where ipi is the formula ob- 
tained by replacing in tp all occurrences of atoms from 
I with t, and by replacing all occurrences of atoms 
from {cci, . . . , x m } \ I with f. 

We will reduce this problem to our problem. For each 
Xi, i = 1, . . . , m, in tp we introduce a new variable 
x\. We also introduce two new atoms p and q. By tp' 
we denote the formula obtained from tp by replacing 
literals ->Xi in the disjuncts of tp with new atoms x\. 
We define a program P{tp) to consist of the following 
clauses: 

1. Xi <— not (a;-) and x\ <— not(.Ti), for every i = 

1, . . . , 171 

2. yi <— tp', for every i = 1, . . . , n 

3. p<-tp' 

4. q <— not (p), not (q). 

We will show that there is I C {x±, . . . , x m } such that 
tpi is a tautology if and only if P(tp) has an ultimate 
complete stable model. 

It is easy to see the that the following properties hold 
for every fixpoint M of : 

1. q is false in M (if q is true in M, does not 
derive q); 

2. p is true in M (otherwise Tpi^ derives q); 

3. yi,..,y n are true in M (since their rules have the 
same bodies as p) ; 

4. for each Xj, either Xi or x[ is true in M. 

For a subset I C {xi, . . . , x m }, let us define I = I U 
{x'i : Xi $l I}. It follows from the properties listed 
above that for each fixpoint M of Tpr^) and, a fortiori, 
if M is a complete ultimate stable model of P(tp), there 
exists an I such that 

M = lU{p,y%,... ,y n }. 



Thus, it suffices to show that if I C {a^, . . . , x m } then 
M = I U {p, yi, . . . , y n } is a complete ultimate stable 
model of P((p) if and only if <pj is a tautology. 

It is easy to verify that for every set M = I U 
{p, j/i,... , y„} and for every J C Af, J7 1 (J, M) sat- 
isfies the following properties: 

1. E/J ((p) (J, M)n{xi, ..,i n , a/ x , ..,<}= 7 

2 - Up {v) {J,M) n {yi,-,yn,P,«} is either or 

{j/i, .., y n ,p}, since bodies of rules of yi,..,y n ,p 

are identical. 

Thus, we find that Up,^(J, M) is either / or M and, 
consequently, Up^J-, M) has a least fixpoint, which 

is either / or M. Hence M = JU {p, J/i,... ,y„} 
is a complete ultimate stable model of -P(^) if and 
only if / is not a fixpoint of Up^(- : M), that is if 

Up, % (I, M) = M. Consequently, all we need to prove 

is that p G Up^(l, M) if and only if ipj is a tautology. 

Let us recall that p e Up, ,(I,M) if and only if 
for every interpretation K 6 [0, M \ I], the formula 
Bp(v) 7 M (p) is true in K, that is, if and only if the for- 
mula i?p( v )_ (p) is a tautology. Let us observe that 
Bp(ip)(p) = v' ■ Thus, it is easy to see that B P ^_ m (p) 
is logically equivalent to ipi. Consequently, the claim 
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DISCUSSION 



and Theorem 5.3 follows 



The problems of interest restricted to programs from 
the class £k become easier. Let us recall that the 
decision whether an atom p £ At(P) belongs to 
Up (I, J) boils down to the decision whether the for- 
mula Bp; j (p) is a tautology. If P is in the class this 
question can be resolved in polynomial time. Thus, the 
ultimate Kripke-Klecne and the well-founded models 
for programs in c an be computed in polynomial 
time. Thus, Theorem 5.6 follows. 



Similarly, it takes only polynomial time to verify 
whether an interpretation / satisfies / = lfp(Up(-, I)). 
Thus, the problem to decide whether a program from 
6 k has a complete ultimate stable model is in NP. To 
prove completeness, we observe that for purely nega- 
tive programs: 

1. there is no difference between complete stable fix- 
points and complete ultimate stable fixpoints 

2. purely negative programs are in £k 

3. the problem of existence of complete stable 
fixpoints for purely negative programs is NP- 
complete. 



We exten ded our algebraic framework [DMTOOa, 
DMT00b | for studying semantics of nonmonotonic rea- 
soning systems. The main contribution of this paper 
is the notion of an ultimate approximation. We argue 
that the Kripke-Kleene, well-founded and stable fix- 
points of the ultimate approximation of an operator 
O can be regarded as the Kripke-Kleene, well-founded 
and stable fixpoints of the operator O itself. In earlier 
approaches, to study fixpoints of an operator O one 
needed to select an appropriate approximation oper- 
ator. There were, however, no principled, algebraic 
ways to do so. In the present paper, we find a dis- 
tinguished element in the space of all approximations 
and propose this particular approximation (ultimate 
approximation) to study fixpoints of O. 

A striking feature of our approach is the ease with 
which it can be applied in any context where seman- 
tics emerge as fixpoints of operators. We applied this 
approach here in the context of logic programming and 
obtained a family of new semantics for logic programs: 
the ultimate Kripke-Kleene, the ultimate well-founded 
and the ultimate stable-model semantics. These se- 
mantics are well motivated and have attractive prop- 
erties. First, they are preserved when we modify the 
program, as long as the 2-valued provability opera- 
tor stays the same (the property that does not hold 
in general for standard semantics). Second, the ul- 
timate Kripke-Kleene and the well-founded semantics 
are stronger (in general) than their standard counter- 
parts, yet approximate the collection of all fixpoints 
of O and the collection of all stable fixpoints of O, 
respectively. The disadvantage is that their complex- 
ity is higher. But, as we noticed, for large classes of 
programs there is actually no loss in efficiency of com- 
puting ultimate semantics. 

This approach can also be applied to default and au- 
toepistemic logics and results in new semantics with 
appealing epistemological features^. It was also re- 
cently used to define a precise semantics for logic pro- 
grams with aggregates [ DPB0l| . 



Thus, Theorem 5.5 follows 



We end this discussion with comments on a possible 
broader role of the approximation theory. One com- 
mon concern when designing semantics of nonmono- 
tonic logics is to avoid models justified by ungrounded 
or self-supporting (circular) arguments. The well- 
founded fixpoints (semantics) avoid such arguments. 
Groundedness is also a fundamental feature of induc- 



We will include a more extensive discussion of these 
applications in the journal version of the paper. 



tion, a constructive way in which humans specify con- 
cepts both in commonsense reasoning settings and in 
formal considerations. In its simplest form induction 
relies only on positive information. In general, how- 
ever, it may make references to negative information, 
too. In either form it is a nonmonotonic specification 
mechanism. As argued in [Den9£], the well-founded 



semantics generalizes existing formalizations of induc- 
tion (for instance, positive induction and iterated in- 
duction . 
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